General

  • Target

    43e6a585c64017573bc07fe709222d1b6cb17f01b7391e5b0a3b22be80e9deb6.zip

  • Size

    1.5MB

  • MD5

    9287a49c7d6f54a961a1f44208c01a00

  • SHA1

    79852c06efc37c5290faa437a360d6503a72d78d

  • SHA256

    43e6a585c64017573bc07fe709222d1b6cb17f01b7391e5b0a3b22be80e9deb6

  • SHA512

    8490971dc5ef9463445a2a63593e319938fe87b73088a3cc628d63180316bf279c6656214417fa8df34a55921ae1ed7e08023f151a5aec51dc326922986c9a3f

  • SSDEEP

    49152:7DoNWXs2d4rJ2UJ1KL3WNeOaNwQfmXNYuT2ou1bL:3owXs2d6IUJ1KL9OaNsNYnoux

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 43e6a585c64017573bc07fe709222d1b6cb17f01b7391e5b0a3b22be80e9deb6.zip
    .rar

    Password: infected

  • Arnis.exe
    .exe windows:10 windows x86 arch:x86

    Password: infected

    667ab5d8d87d260574e136040f585247


    Code Sign

    Headers

    Imports

    Sections

  • Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    8f734ad2a2d1a7b5910aa87f16fd104e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Svg.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    70d4f037a0ab67cbe75e5358a3f3386f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • args.rs
    .js
  • block_definitions.rs
  • iviewers.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    Password: infected

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Exports

    Sections

  • main.rs
    .js
  • ssleay32.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    073d57b7886016768db36f2bc192c07c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • version_check.rs
  • world_editor.rs
    .js